Detik News- Exploit DB
- [webapps] Wp2Fac - OS Command Injection September 8, 2023Wp2Fac - OS Command Injection
- [webapps] Wordpress Plugin Elementor 3.5.5 - Iframe Injection September 8, 2023Wordpress Plugin Elementor 3.5.5 - Iframe Injection
- [remote] GOM Player 2.3.90.5360 - Remote Code Execution (RCE) September 8, 2023GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
- [webapps] soosyze 2.0.0 - File Upload September 8, 2023soosyze 2.0.0 - File Upload
- [remote] Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities September 8, 2023Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
- [webapps] Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS September 8, 2023Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
- [webapps] Drupal 10.1.2 - web-cache-poisoning-External-service-interaction September 8, 2023Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
- [webapps] Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure September 8, 2023Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
- [webapps] SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection September 8, 2023SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
- [dos] SyncBreeze 15.2.24 - 'login' Denial of Service September 8, 2023SyncBreeze 15.2.24 - 'login' Denial of Service
- [local] GOM Player 2.3.90.5360 - Buffer Overflow (PoC) September 8, 2023GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
- [webapps] CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery') September 4, 2023CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
- [webapps] AdminLTE PiHole 5.18 - Broken Access Control September 4, 2023AdminLTE PiHole 5.18 - Broken Access Control
- [local] Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow September 4, 2023Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
- [local] Kingo ROOT 1.5.8 - Unquoted Service Path September 4, 2023Kingo ROOT 1.5.8 - Unquoted Service Path
- [webapps] Wp2Fac - OS Command Injection September 8, 2023
Category Archives: Security
Menonaktifkan Open DNS Server BIND
Beberapa waktu lalu, tim abuse dari salah satu penyedia VPS (Virtual Private Server) yang saya gunakan meneruskan email komplain ke saya terkait dengan digunakannya server VPS saya sebagai reflektor serangan DDoS ke server di Eropa. Setelah saya cek, ternyata ada … Continue reading
Posted in IT, Security, Tips and Tricks
Leave a comment
[Update] WordPress 0day XSS Vulnerability
Buat teman-teman yang mempunyai website/blog menggunakan wordpress, diharapkan segera melakukan update ke wordpress terbaru 4.2.1 berhubung adanya vulnerability 0day XSS dimana penyerang bisa membuat komentar di post/page manapun dan menyisipkan script XSS yang bisa mendapatkan/eksekusi perintah di server. Referensi bisa … Continue reading
Cpanel Down
Siang ini saya coba mengakses cpanel.net dan sepertinya database sedang mengalami masalah. Bisa dibayangkan kalau corporate sebesar Cpanel masih mengalami masalah classic seperti ini. Bagaimana kesiapan Anda dalam hal menangani bisnis Anda yang berhubungan dengan koneksi ke pusat data mengalami … Continue reading
Posted in IT, Security
Leave a comment
Hati-hati pencurian password email
yahoo scam, stolen password yahoo Continue reading
Posted in IT, Security, Tips and Tricks
Leave a comment
Forecast vulnerability Pligg CMS
Saya cukup kaget melihat ada forecast vulnerability di situs securityfocus.com. Bisa dilihat di screenshoot disamping atau coba klik http://www.securityfocus.com/bid/51273. Aneh tapi cukup nyata.
Posted in IT, Security
Leave a comment